Every employer in the United States must verify that each new hire is authorized to work in the country — a requirement created by the Immigration Reform and Control Act of 1986 (IRCA). The verification happens through Form I-9, which every employer must complete for every employee. E-Verify is the electronic system that takes verification a step further, checking I-9 information against federal databases to confirm work authorization. E-Verify is voluntary for most private employers but mandatory for federal contractors and in several states. Approximately 1 million employers are enrolled, verifying roughly 40+ million cases annually.
Current Law (2026)
| Parameter | Value |
|---|---|
| Governing statute | 8 U.S.C. § 1324a (employer sanctions/verification); E-Verify authorized under appropriations riders |
| Form I-9 | Required for every new hire in the United States — no exceptions |
| Deadline | I-9 must be completed within 3 business days of hire |
| E-Verify | Electronic verification system run by USCIS |
| E-Verify enrollment | Mandatory for federal contractors (FAR E-Verify clause); voluntary for most private employers |
| State mandates | ~20+ states require E-Verify for some or all employers |
| Annual E-Verify cases | ~40+ million |
| Employer penalty (hiring violations) | $716-$5,724 per unauthorized worker (first offense); up to $25,076 per worker for repeat violations |
| Employer penalty (I-9 paperwork) | $288-$2,861 per violation |
| Criminal penalty | Pattern or practice of hiring unauthorized workers: up to $3,000/worker and 6 months imprisonment |
| Anti-discrimination | Employers may not discriminate based on national origin or citizenship status in I-9/E-Verify process |
Legal Authority
- 8 U.S.C. § 1324a — Unlawful employment of aliens (makes it illegal to hire, recruit, or refer for employment any person knowing they are unauthorized to work; requires all employers to verify identity and work authorization through the I-9 process; establishes civil and criminal penalties for violations)
- 8 U.S.C. § 1324b — Unfair immigration-related employment practices (prohibits discrimination based on national origin or citizenship status in hiring, firing, and recruitment; prohibits document abuse — demanding specific documents or more documents than required; enforced by the DOJ Office of Special Counsel)
How It Works
Form I-9 is the universal requirement. Within 3 business days of any new hire's start date, the employer must: (1) have the employee complete Section 1 (identity and work authorization attestation), and (2) examine the employee's original documents (from approved lists — List A documents establish both identity and work authorization; List B + C combinations establish identity and work authorization separately) and complete Section 2. The employer must retain I-9 forms for 3 years after hire or 1 year after termination, whichever is later.
E-Verify adds an electronic check. After completing the I-9, participating employers submit the employee's information (name, SSN, date of birth, citizenship status, document information) to E-Verify, which checks against Social Security Administration and DHS databases. Most cases receive an instant confirmation. If the databases can't confirm authorization, E-Verify issues a Tentative Nonconfirmation (TNC) — the employee has 8 federal government workdays to contest and resolve the mismatch. Employers may not take adverse action against an employee based on a TNC until the process is complete.
Employer sanctions are the enforcement mechanism. Employers who knowingly hire unauthorized workers face escalating civil fines ($716-$5,724 per worker for first offense, up to $25,076 for repeat violations) and criminal prosecution for pattern or practice violations. Importantly, the law also penalizes paperwork violations — failing to properly complete or retain I-9 forms — even if all employees are authorized. ICE conducts worksite investigations and I-9 audits targeting both knowing violations and paperwork noncompliance.
Anti-discrimination protections (§ 1324b) are the counterbalance. While employers must verify authorization, they may not: demand specific documents (a practice called "document abuse" — if an employee presents valid List A or List B+C documents, the employer must accept them); discriminate based on national origin or citizenship status; or treat authorized workers differently because they "look foreign" or have an accent. The DOJ's Immigrant and Employee Rights Section enforces these protections.
E-Verify's legal status is unusual — it was originally authorized as a pilot program and has been extended through annual appropriations riders rather than permanent legislation. Proposals to make E-Verify mandatory nationwide have been debated for decades but not enacted.
How It Affects You
If you're an employer with hiring responsibilities: I-9 compliance is not discretionary — every new hire requires a completed I-9 within 3 business days of their start date, with no exceptions for short-term, part-time, or family-member hires. The most common audit-generating mistakes: (1) using an outdated I-9 form — only the current version is acceptable; outdated forms create paperwork violations even for authorized workers; (2) accepting expired documents — documents must be unexpired at the time of examination, not at time of hire; (3) missing employer attestation — Section 2 must be signed with the document types, numbers, expiration dates, and the first day of employment; (4) failing to reverify — employees with temporary work authorization (EADs, H-1B status) require reverification before their document expires. When ICE serves a Notice of Inspection, you typically have 3 business days to produce I-9 forms — the difference between organized I-9 binders and disorganized files can significantly affect the fine assessment. Self-audit annually: review Section 1 (employee attestation complete and signed on or before day 1), Section 2 (employer attestation complete, all fields filled, documents were unexpired at hire). Correct errors with a single-line strikethrough, initials, and date — never use white-out. Penalty per paperwork violation is $288-$2,861 per I-9 form; a 50-employee worksite with documentation errors across multiple forms can face $50,000+ in fines before reaching any substantive violations. USCIS's I-9 Central at uscis.gov/i-9-central has checklists, current acceptable document lists, and a self-audit tool.
If you're an employee or job applicant: The I-9 process has specific protections for you that employers often violate. The core rule: you choose which documents to present from the USCIS List of Acceptable Documents — your employer cannot require you to bring a passport when a driver's license + Social Security card would satisfy the requirements. Demanding specific documents is "document abuse" under § 1324b — it's illegal discrimination regardless of whether it's directed at one nationality or all employees. If E-Verify returns a Tentative Nonconfirmation (TNC), you have 8 federal government workdays to contact the SSA or DHS to resolve the mismatch — your employer cannot fire you or take adverse action during this period. Do not ignore a TNC. A TNC is not a finding that you're unauthorized to work; it's a flag that the databases couldn't match your information, which happens to lawful workers through name changes, data entry errors, and recent status changes. If you experienced discrimination in the I-9 or E-Verify process — demands for specific documents, adverse action during TNC resolution, or refusal to hire based on citizenship or national origin — contact DOJ's Immigrant and Employee Rights (IER) Section at 1-800-255-7688 (workers) or file a complaint at justice.gov/ier.
If you're an HR professional or compliance officer managing I-9/E-Verify: The 2023 Form I-9 revision streamlined the form to two pages with QR codes linking to employer checklists and instructions — ensure you're using the current version. E-Verify-enrolled employers gained remote examination authority starting August 2023: enrolled employers can examine documents via live video interaction rather than in person, provided they retain copies of documents and complete the alternative procedure checkbox on Section 2. If you're not E-Verify-enrolled, you cannot use remote examination — physical presence is required. For E-Verify compliance: the Memorandum of Understanding (MOU) you sign at enrollment requires posting the E-Verify participation notice (available in English and Spanish), running cases within 3 business days of hire, never using E-Verify for pre-screening applicants before an offer is made, and not using E-Verify selectively for some employees but not others. The E-Verify TNC rate is approximately 1-3% — at scale (mandatory nationwide use), this would flag millions of authorized workers. For complex workforce scenarios (seasonal agricultural workers, staffing agencies, temporary-to-hire): each employing entity must complete its own I-9 regardless of staffing agency involvement, unless the agency properly qualifies as the employer of record under relevant guidance.
If you're a federal contractor: The FAR E-Verify clause (FAR 52.222-54) requires enrollment and participation as a condition of federal contracts exceeding $100,000 and lasting at least 120 days ($3,000 for certain commercial services). You must verify new hires within 3 business days AND existing employees assigned to the covered contract within 90 days of enrollment or contract award. Subcontractors on covered contracts may also be required to participate — your prime contract will specify subcontractor flow-down requirements. Noncompliance is a contract violation triggering cure notice authority. Check your contracts for the FAR 52.222-54 clause before assuming you're covered or excluded — exemptions exist for contracts under 120 days, purely commercial off-the-shelf item purchases, and work performed entirely outside the United States.
State Variations
I-9 is federal; E-Verify mandates vary by state:
- ~20+ states require E-Verify for some or all employers (Arizona, Alabama, Mississippi, South Carolina, and others require all employers; many others require state contractors or agencies)
- Arizona and other states impose state penalties (including license revocation) for employers who knowingly hire unauthorized workers
- Some states (California, Illinois) restrict or prohibit mandatory E-Verify use beyond what federal law requires
- State anti-discrimination laws may provide additional protections against immigration-related employment discrimination
Implementing Regulations
-
8 CFR Part 274a — Control of Employment of Aliens: the complete regulatory framework for the employer sanctions and employment eligibility verification system created by the Immigration Reform and Control Act of 1986 (IRCA). Part 274a is the operational rulebook that every U.S. employer must follow:
- § 274a.1 — Unauthorized alien defined: an alien who is not (1) a lawful permanent resident, or (2) authorized to be employed under the Immigration and Nationality Act or USCIS regulations; the definition turns on the alien's status at the time of the employment action, not at the time of hire — an alien whose work authorization expires while employed becomes an "unauthorized alien" requiring reverification
- § 274a.2 — Form I-9 procedures: the core I-9 compliance requirements; every employer must complete Section 1 (employee self-attestation of identity and work status) by the employee's first day of work, and complete Section 2 (employer document inspection and attestation) within 3 business days of the start date; the employer must physically examine original documents from List A (documents establishing both identity AND work authorization — passports, Permanent Resident Cards, Employment Authorization Documents) or a combination of List B (identity only — driver's licenses) plus List C (work authorization only — Social Security cards); employers must accept any valid document from the published lists without requesting specific documents or additional documents; selective document requests constitute potential discrimination; remote I-9 completion (via video or electronic means) is permitted for employers enrolled in E-Verify under a 2022 DHS final rule effective January 2023
- § 274a.4 — Good faith compliance defense: an employer who completes the I-9 and examines the required documents in good faith is shielded from civil liability even if the documents were fraudulent and the employee was unauthorized; the employer must not have had actual knowledge that the documents were false; good faith compliance does not protect an employer who had actual knowledge the worker was unauthorized regardless of whether an I-9 was completed — the "document check" does not create a liability shield if the employer actually knew
- § 274a.10 — Penalties: civil penalties for knowingly hiring an unauthorized alien range from $698–$3,490 per violation for a first offense, $5,578–$13,946 for a second offense, and $8,365–$27,894 for three or more offenses (amounts are adjusted annually for inflation under the Federal Civil Penalties Inflation Adjustment Act); criminal penalties for a pattern or practice of violations: up to $3,000 per unauthorized alien employed, plus imprisonment up to six months; I-9 paperwork violation penalties (failure to properly complete, retain, or make I-9 forms available): $281–$2,789 per violation even if all employees were work authorized — the paperwork obligation is independent of the substantive prohibition
- § 274a.12 — Classes of aliens authorized to accept employment: the definitive list of immigration categories that carry automatic employment authorization (lawful permanent residents, asylees, refugees, various other visa categories) versus those that require a separate Employment Authorization Document (EAD — Form I-766); the two-tier structure (incident-to-status vs. discretionary authorization) determines whether an alien in a particular immigration status can work without filing any additional application or must apply for an EAD; for example, H-4 spouses of H-1B holders may apply for EADs in certain circumstances (§ 274a.12(c)(26)), while H-1B holders themselves are authorized incident to status (§ 274a.12(b))
- § 274a.13 — Employment Authorization Document (EAD) applications: aliens whose work authorization is discretionary (not incident to status) must file Form I-765 to obtain Form I-766 (the EAD); USCIS has a regulatory 90-day processing target for EAD applications; EAD processing backlogs have been a persistent problem — delays that leave authorized workers unable to demonstrate work authorization through List A documents; the Biden administration expanded automatic extension periods for renewing EAD holders pending renewal
The I-9 system is one of the most universally applicable federal compliance requirements — every employer in the U.S., regardless of industry or size, must comply. ICE I-9 audits (Form I-9 inspection notices require production within 3 business days) have increased under both Trump administrations; in FY2024, ICE conducted thousands of worksite investigations resulting in arrests and civil fines. Employers should maintain I-9 forms in a separate I-9 file (not in the personnel file), audit retention schedules regularly (3 years from hire or 1 year from termination, whichever is later), and conduct periodic internal I-9 audits using the same standards ICE inspectors apply. Recent rulemakings: 88 FR 55744 (August 2023) — authorized remote I-9 document examination for E-Verify users; 87 FR 18223 (March 2022) — COVID-era flexibility for I-9 completion extended/formalized.
-
28 CFR Part 44 — Unfair Immigration-Related Employment Practices (11 sections — the DOJ Office of Special Counsel for Immigration-Related Unfair Employment Practices (OSC)'s implementing rules for INA § 274B (8 U.S.C. § 1324b), which prohibits employment discrimination based on citizenship status and national origin in the immigration-employment context; authority: 8 U.S.C. § 1103):
- § 44.200 — Prohibited practices: it is an unfair practice for an employer with 4 or more employees to discriminate against any person (U.S. citizen, national, lawful permanent resident, or work-authorized alien) in hiring, firing, recruitment, or referral for a fee because of that person's national origin or citizenship status; it is also an unfair practice to engage in document abuse — requesting more or different documents than required by I-9 rules, or refusing documents that appear genuine on their face; employers subject to Title VII's national origin prohibition (employers with 15+ employees) are generally exempt from Part 44's national origin discrimination prohibition (OSC enforces for smaller employers), but document abuse applies to all employers covered by I-9 regardless of size
- § 44.202 — Counting employees: the 4-employee threshold uses a "20 calendar weeks in the current or preceding calendar year" test — similar to Title VII coverage; part-time workers, seasonal workers, and agricultural workers count; this counting rule determines whether OSC or the EEOC has jurisdiction over national origin discrimination claims
- § 44.300 — Filing a charge: any injured party, entity authorized by the injured party, or any organization may file a charge with OSC within 180 days of the alleged discriminatory act (or within 180 days of learning of the act if the victim did not know it was unlawful); OSC must acknowledge the charge within 10 days by certified mail
- § 44.302 — Investigation: OSC may request documents, answer written interrogatories, inspect premises, and subpoena records; employers must make their I-9 forms available to OSC; OSC investigates whether the employer's document request practices, hiring decisions, or reverification practices reflect discriminatory intent or effect
- § 44.303 — Determination: within 120 days of receiving a charge, OSC must complete its investigation and determine whether to file a complaint with an immigration law judge or dismiss the charge; if OSC dismisses, the charging party has 90 days to file their own complaint before an immigration law judge; OSC's enforcement actions can result in orders to cease discriminatory practices, back pay, reinstatement, and civil monetary penalties
Part 44 is the mirror image of Part 274a from the employee perspective: while Part 274a protects against unauthorized worker hiring, Part 44 prevents employers from overreaching in their verification practices in ways that discriminate against work-authorized individuals. The most common violation — document abuse — occurs when employers demand that employees produce specific documents (e.g., demanding a green card from a Latino employee rather than accepting a driver's license plus Social Security card) or more documents than the I-9 requires. Document abuse claims spiked following E-Verify mandates, as employers unfamiliar with I-9 rules sometimes imposed additional document requirements on employees who appeared foreign-born. OSC handles several hundred charges per year; its website and employer hotline (800-255-8155) provide compliance guidance. No recent rulemakings: Part 44 has been stable; the substantive standards are statutory.
Pending Legislation
- S 1151 (Sen. Grassley, R-IA) — Accountability Through Electronic Verification Act: make E-Verify permanent and require all U.S. employers to use it within one year, with expanded identity checks and penalties. Status: Introduced.
- HR 2641 (Rep. Mackenzie, R-PA) — Require all federal contractors and subcontractors to enroll in and comply with E-Verify. Status: In committee.
- HR 3715 (Rep. Gill, R-TX) — New IDEA Act: bar tax deductions for wages paid to unauthorized workers and expand E-Verify plus interagency data sharing. Status: Introduced.
- S 1123 (Sen. Banks, R-IN) — College Employment Accountability Act: bar colleges that hire unauthorized immigrants from Title IV student aid, require E-Verify with DHS monitoring. Status: Introduced.
- HR 5534 (Rep. Suozzi, D-NY) — Add South Korea to the E-3 visa program with employer E-Verify requirements tied to the visa allocation. Status: Introduced.
- HR 1337 (Rep. Neal, D-MA) — Add Ireland to the E-3 visa program with employer E-Verify participation requirements. Status: Introduced.
- HR 7200 — VERIFY CDL Act: require E-Verify checks before states issue or renew commercial driver's licenses. Status: Introduced.
- HR 7680 — Protect our Ballots Act: require 501(c)(3) charities paying people for political work to enroll in E-Verify. Status: Introduced.
The Congressional Budget Office scored H.R. 2641, the Day 1, Dollar 1 E-Verify Act, which would require all federal contractors and subcontractors to enroll in and comply with E-Verify. The bill was ordered reported by the House Committee on the Judiciary on January 8, 2026, advancing it beyond the introduction stage previously noted in this article. CBO published its cost estimate on March 26, 2026. (CBO, Mar. 26, 2026)
Recent Developments
The debate over mandatory nationwide E-Verify continues as a central element of immigration reform proposals. The system has been upgraded with photo-matching technology, improved database accuracy, and self-check features allowing individuals to verify their own records. ICE worksite enforcement priorities have shifted across administrations — from criminal investigations of employers to administrative audits and back. Form I-9 was modernized in 2023 with a streamlined format and alternative remote examination procedures for E-Verify employers. Identity fraud and document counterfeiting remain challenges, with some advocates pushing for a more secure identity verification system beyond the current I-9/E-Verify framework. Violations can also trigger deportation proceedings for unauthorized workers.
- Trump immigration enforcement and E-Verify expansion (2025): The Trump administration directed all federal agencies and federal contractors to use E-Verify — a significant expansion beyond the ~8% of U.S. employers that previously participated voluntarily. The administration also pushed for mandatory E-Verify legislation as part of comprehensive immigration enforcement. ICE worksite enforcement increased dramatically: audits, raids, and prosecutions of employers hiring unauthorized workers became a signature enforcement tool alongside deportation operations.
- Mandatory E-Verify legislation push: Congress has considered mandatory E-Verify bills in the 119th Congress, with stronger Republican support than in prior sessions. The Legal Workforce Act and related proposals would require all employers to use E-Verify within 2-3 years. Business groups — including the U.S. Chamber of Commerce, agriculture industry associations, and construction industry groups — have historically opposed mandatory E-Verify due to compliance costs, error rates that flag authorized workers, and concern about workforce disruption. Some libertarian-leaning Republicans also oppose the federal employment database infrastructure.
- E-Verify error rate and false positives: The E-Verify system has a "tentative non-confirmation" (TNC) rate of approximately 1-3% — meaning roughly 1-3 out of every 100 new hires are initially flagged as potentially unauthorized even if they are lawful workers. Workers who receive a TNC have 8 business days to contact SSA or DHS to resolve the mismatch. Studies have found that naturalized citizens, immigrants with name changes, and workers with recent status changes experience higher TNC rates. At scale (mandatory nationwide use), false positive rates affect millions of workers annually.
- Agricultural sector and E-Verify: The agricultural sector — which relies heavily on seasonal labor, much of it through the H-2A visa program — faces particular E-Verify challenges. H-2A workers are E-Verify eligible, but the program's paperwork and timing requirements have been cited as barriers to full agricultural participation. Farm bureaus and growers have argued that mandatory E-Verify without simultaneous H-2A reform would create severe labor shortages for U.S. food production.
A federal jury in the Middle District of Florida convicted Cristian Daniel Diaz-Garcia, a Honduran national without lawful U.S. status, on two counts of aggravated identity theft, two counts of false representation of a Social Security number, and two counts of making a false claim of U.S. citizenship for employment purposes after he twice used stolen identities to defeat E-Verify checks at a federal contractor enrolled in the system. The case illustrates a known vulnerability in E-Verify: the system can be circumvented when an unauthorized worker presents fraudulent documents using a real U.S. citizen's identity, since E-Verify confirms that the identity exists in federal databases but cannot detect that the presenting individual is not the true document holder. Diaz-Garcia faces a maximum of 24 years in federal prison; sentencing was scheduled for March 17, 2026. The investigation involved Homeland Security Investigations, the SSA Office of Inspector General, the Department of Transportation OIG, the Department of Labor OIG, U.S. Border Patrol, and Florida state law enforcement. (U.S. Attorney's Office, M.D. Fla. / SSA OIG, Dec. 22, 2025)
A Nicaraguan national, Leonardo Paramo-Barbas, was sentenced on December 4, 2025, by U.S. District Judge Sarah S. Vance in the Eastern District of Louisiana to time served after pleading guilty to misuse of a Social Security number to obtain and maintain employment, in violation of 42 U.S.C. § 408(a)(7)(B). The case involved falsely representing that a Social Security number was assigned to him on July 20, 2022. The prosecution was part of Operation Take Back America, a DOJ-wide initiative targeting illegal immigration and transnational criminal organizations, and was investigated by ICE Enforcement and Removal Operations and Homeland Security Investigations. The case illustrates continued federal prosecution of Social Security number fraud as an employment eligibility enforcement mechanism. (U.S. Attorney's Office, E.D. La. / SSA OIG, Dec. 19, 2025)
A federal jury in the Middle District of Florida convicted Nidia Roxana Maradiaga-Flores, a Honduran national without lawful U.S. status, on counts of aggravated identity theft, false representation of a Social Security number, and making a false claim of U.S. citizenship for employment purposes after she used another person's identity to defeat E-Verify checks at Archer Western-de Moya Group Joint Venture II, a construction company enrolled in E-Verify. Maradiaga-Flores faces a maximum of 12 years in federal prison; sentencing is scheduled for April 17, 2026. The case parallels the earlier Diaz-Garcia conviction and further illustrates the same systemic vulnerability: E-Verify confirms that an identity exists in federal databases but cannot detect that the presenting individual is not the true document holder. The investigation involved Homeland Security Investigations, the SSA Office of Inspector General, the Department of Transportation OIG, the Department of Labor OIG, U.S. Border Patrol, the Florida Department of Law Enforcement, and the Pinellas County Sheriff's Office. (U.S. Attorney's Office, M.D. Fla. / SSA OIG, Jan. 15, 2026)
Eleven defendants, including the CEO, president, CFO, and controller of Specialty Foods Distribution (SFD), a Joplin, Missouri wholesale food corporation, were sentenced in federal court in the Western District of Missouri for a RICO conspiracy to hire, harbor, and transport unauthorized workers across a network of enterprise-affiliated restaurants in Missouri, Arkansas, Kansas, and Oklahoma from January 2018 to August 2021. The conspiracy involved keeping unauthorized workers off official payroll records, failing to collect or maintain accurate Form I-9 documentation, falsely attesting to I-9 accuracy, and facilitating fraudulent identification documents for unauthorized workers. The court imposed an aggregate 164 months of imprisonment and ordered forfeiture exceeding $6.4 million, with CEO Jose Luis Bravo receiving 36 months imprisonment and approximately $5.76 million in forfeiture covering bank accounts, 11 commercial buildings, and interests in over 20 business entities. The case was prosecuted as part of Operation Take Back America and investigated by Homeland Security Investigations with assistance from the SSA OIG, IRS Criminal Investigations, and multiple state agencies. (U.S. Attorney's Office, W.D. Mo. / SSA OIG, Jan. 22, 2026)
A Guatemalan national, Romeo Perez-Bravo, pleaded guilty in the Western District of Missouri on January 28, 2026, to aggravated identity theft and illegal re-entry by an alien previously convicted of a felony after using a Minnesota man's name and Social Security number to obtain employment at multiple businesses in St. Joseph, Missouri from approximately 2009 through his March 2025 indictment. The victim discovered the fraud only when the IRS issued tax bills for income assigned to his Social Security number. Perez-Bravo faces a mandatory two-year consecutive sentence for aggravated identity theft plus up to ten years for illegal re-entry, and had been deported three times previously. The case, prosecuted as part of Operation Take Back America, was investigated by SSA OIG, Homeland Security Investigations, and local law enforcement, and illustrates the same systemic E-Verify vulnerability documented in the Diaz-Garcia and Maradiaga-Flores cases: the system cannot detect that a presenting individual is not the true holder of a valid identity. (U.S. Attorney's Office, W.D. Mo. / SSA OIG, Jan. 28, 2026)
Cristian Daniel Diaz-Garcia, the Honduran national convicted on two counts of aggravated identity theft, two counts of false representation of a Social Security number, and two counts of making a false claim of U.S. citizenship for employment purposes after twice using stolen identities to defeat E-Verify checks at Archer Western-de Moya Group Joint Venture II, was sentenced on March 18, 2026, by U.S. District Judge Steven D. Merryday in the Middle District of Florida to three years and two months in federal prison. The sentencing resolves the case previously noted as pending a March 17, 2026 sentencing date. (U.S. Attorney's Office, M.D. Fla. / SSA OIG, Mar. 18, 2026)